[vlc-devel] Re: vlc: svn commit r18556 (sigmunau)

[Rémi Denis-Courmont]

Le vendredi 12 janvier 2007 20:12, Subversion daemon a écrit :
> Btw when did "crash" change into "denial of service"?

DoS is more precise; it asserts that:

1/ the bug cannot be used to do anything but stop the service
(in particular, no authorization bypass or arbitrary code). A buffer 
overflow typically crashes the app too, but it's not just a DoS.

2/ the bug can somehow be triggered without user 
authorization/interaction (i.e. through a browser plugin or network 
service discovery). If you can only crash by clicking a button on the 
GUI, it's not a DoS.

-- 
Rémi Denis-Courmont
http://www.remlab.net/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://mailman.videolan.org/pipermail/vlc-devel/attachments/20070112/73cac4a6/attachment.sig>